$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/75c92172-6911-32c6-b7a8-a35de8403ddd.roa File: 75c92172-6911-32c6-b7a8-a35de8403ddd.roa (raw, json) Hash identifier: /7qfTnjwLSU6AH+kYpIiIHUKEGqNpgfcTsI+HA8No38= Subject key identifier: CD:E3:08:97:11:AF:35:F9:FF:78:7C:5D:40:03:43:FD:8F:AD:94:80 Certificate issuer: /CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Certificate serial: 010D0C9F4328584D5243543916F72FB044ACB180 Authority key identifier: 34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/75c92172-6911-32c6-b7a8-a35de8403ddd.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 397301 IP address blocks: 172.99.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:54:39:16:f7:2f:b0:44:ac:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=bc5d310c-0c95-46b7-8b0f-bb5354c639e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b1:aa:af:10:fe:f9:77:95:38:47:6d:e3:f4: 1a:aa:a2:73:91:57:c6:32:32:08:80:bd:71:a5:ba: 80:b1:06:74:a9:b7:8f:12:f5:3b:0c:2a:5e:cb:78: f4:0f:1e:39:60:f5:74:6c:89:12:4f:db:da:c9:77: 30:83:45:ed:07:c6:a6:f2:96:08:a4:8f:56:b9:79: a8:83:fa:5a:29:cd:0e:5d:a6:ac:b8:9f:38:f7:9a: 80:66:73:d1:31:57:85:71:8d:4b:0c:8e:26:60:9f: eb:fd:8f:4a:41:e3:d8:dc:0f:6f:9f:f0:d9:97:e9: bc:5e:f6:ff:87:a7:51:49:d8:9c:6e:82:f7:4d:01: 03:66:37:b9:9e:e0:35:ce:0b:28:7e:d5:f1:9a:e9: 1b:3c:e7:5b:a3:b5:c5:85:95:76:34:6a:68:9c:a0: d5:3c:90:35:f2:85:6e:a7:98:28:ab:53:82:b0:af: fb:fd:a4:53:63:4a:34:e6:66:3d:0c:34:0b:97:35: bd:3f:96:b2:cb:07:6b:1d:71:9f:23:38:a0:46:31: 62:9f:7f:71:7f:75:85:53:a5:d6:3e:1a:03:7b:41: ca:c6:54:a4:46:f3:48:f2:25:21:60:72:d2:23:91: 84:00:d9:b0:c3:5e:b2:72:f8:3a:4f:05:71:77:40: eb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E3:08:97:11:AF:35:F9:FF:78:7C:5D:40:03:43:FD:8F:AD:94:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/75c92172-6911-32c6-b7a8-a35de8403ddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl X509v3 Authority Key Identifier: keyid:34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer sbgp-ipAddrBlock: critical IPv4: 172.99.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:df:3c:ee:80:fa:d9:56:5a:b2:5a:51:6d:7b:25:e9:d2:d1: e5:41:5d:c4:23:2a:35:bf:c7:b1:11:25:f1:04:ca:ad:6d:91: 81:56:88:dc:d8:8d:30:d4:82:1f:6e:5a:34:b8:b6:36:c3:51: 11:fd:b0:03:6b:55:05:13:ce:3f:1f:0a:e4:7b:da:c3:fc:0e: b4:04:ba:8e:2e:73:05:16:80:7a:3c:55:ae:8e:78:ae:e0:ac: d0:3e:2a:52:d3:d1:44:77:3b:01:e1:43:f2:ed:71:65:58:39: 41:71:7f:71:d5:c6:b8:ea:80:31:6e:9e:6e:83:15:a2:11:0e: e3:90:ff:81:7c:29:27:41:d3:52:d0:ef:83:15:3f:30:05:fa: fc:6e:24:50:e1:50:ce:cc:c9:66:05:2d:3e:fb:23:b6:ac:f8: cb:9d:06:ae:d9:a7:20:83:87:d0:82:8a:ed:e7:b1:29:48:be: 23:70:32:cc:e4:36:a5:4e:8c:59:68:e5:98:b9:42:3d:e2:52: 10:fe:b4:87:7c:4a:e2:97:b8:c5:6c:df:c5:56:65:2b:ea:bb: de:ba:92:d0:30:3f:50:9a:86:22:85:63:4c:15:2a:7f:07:3e: c7:3f:8e:44:ce:10:0d:98:d3:e9:f9:2b:7c:e2:5d:29:ae:cf: f1:98:32:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1Q5FvcvsESssYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFkOWMyYzEtOGZiMy00YjM4LWI2ZDYtOTc5OWI0ZTM3 NzJmMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk YmM1ZDMxMGMtMGM5NS00NmI3LThiMGYtYmI1MzU0YzYzOWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbGqrxD++XeVOEdt4/QaqqJzkVfGMjIIgL1x pbqAsQZ0qbePEvU7DCpey3j0Dx45YPV0bIkST9vayXcwg0XtB8am8pYIpI9WuXmo g/paKc0OXaasuJ8495qAZnPRMVeFcY1LDI4mYJ/r/Y9KQePY3A9vn/DZl+m8Xvb/ h6dRSdicboL3TQEDZje5nuA1zgsoftXxmukbPOdbo7XFhZV2NGponKDVPJA18oVu p5goq1OCsK/7/aRTY0o05mY9DDQLlzW9P5ayywdrHXGfIzigRjFin39xf3WFU6XW PhoDe0HKxlSkRvNI8iUhYHLSI5GEANmww16ycvg6TwVxd0DrAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3jCJcRrzX5/3h8XUADQ/2PrZSAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5 YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5YjRlMzc3MmYvNzVjOTIxNzItNjkxMS0z MmM2LWI3YTgtYTM1ZGU4NDAzZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzFkOWMyYzEtOGZiMy00YjM4LWI2 ZDYtOTc5OWI0ZTM3NzJmL2MxZDljMmMxLThmYjMtNGIzOC1iNmQ2LTk3OTliNGUz NzcyZi5jcmwwHwYDVR0jBBgwFoAUNNJmkHdIRAEZdNNZ14UVxtrMrM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5 YjRlMzc3MmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/fPO6A+tlWWrJaUW17JenS0eVBXcQjKjW/x7ERJfEEyq1tkYFWiNzY jTDUgh9uWjS4tjbDURH9sANrVQUTzj8fCuR72sP8DrQEuo4ucwUWgHo8Va6OeK7g rNA+KlLT0UR3OwHhQ/LtcWVYOUFxf3HVxrjqgDFunm6DFaIRDuOQ/4F8KSdB01LQ 74MVPzAF+vxuJFDhUM7MyWYFLT77I7as+MudBq7ZpyCDh9CCiu3nsSlIviNwMszk NqVOjFlo5Zi5Qj3iUhD+tId8SuKXuMVs38VWZSvqu966ktAwP1CahiKFY0wVKn8H Psc/jkTOEA2Y0+n5K3ziXSmuz/GYMm4= -----END CERTIFICATE-----Generated at Mon Apr 13 20:00:26 2026 by rpki-client